Senior Infrastructure Engineer End User Compute (OS Engineering)

Job description

Job Description **About this role:** Wells Fargo is seeking a Senior Infrastructure Engineer -OS engineering/Azure Cloud. **In this role, you will:** - Lead or participate in high level technical concepts spanning technology and business - Develop specifications for complex infrastructure systems, design and test solutions - Contribute to the testing of business, application and technical infrastructure requirements - Drive solutions to reduce recovery - Review and analyze solutions for cloud security, secrets management and key rotations - Design, code, test, debug and document programs using Agile development practices - Design complex system upgrades - Resolve troublesome trends as they develop - Develop a long range plan designed to resolve problems and prevent them from recurring - Direct the daily risk and control flow of operations, focusing on policies, procedures and work standards to ensure success - Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals **Required Qualifications:** - 4+ years of Technology Infrastructure Engineering and Solutions experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education **Desired Qualifications:** - 4+ years in infrastructure engineering with strong focus on Windows OS engineering in large enterprise environments. - Deep understanding of Windows internals (services, kernel components, memory, policies, drivers, certificates, update service). - Strong hands-on experience with modern endpoint management technologies: - Azure AD / Entra ID - Zero Trust - Certificate services - Advanced PowerShell engineering skills, including: - Modular script design - Strong logging telemetry - Error handling retry logic - Idempotent execution patterns - Secure credential handling - Use of Microsoft Graph REST APIs - Experience managing OS lifecycle at scalefeature update flights, ring management, controlled rollout, and rollback plans. - Strong troubleshooting skills across OS, identity, networking, secure boot/UEFI/TPM, and endpoint security control interactions. - Familiarity with CI/CD concepts: - Git/Git branching strategies - Automated validation pipelines - Shift left testing - Artifact versioning - Infrastructure-as-code or configuration-as-code patterns (where applicable) - Knowledge of observability for endpoints: - Log Analytics - KQL - Performance troubleshooting - Experience with driver, firmware, and BIOS/UEFI configuration across OEM hardware. - Understanding security frameworks such as CIS Benchmarks, Microsoft Security Baselines, Zero Trust principles. - Strong collaboration and team-player mindset, with ability to lead design sessions and mentor junior engineers. - Awareness of Agile ways of working, sprint planning, backlog refinement, and continuous improvement. - Handson experience with DEX/XLA tools such as Nexthink, Lakeside SysTrack, Aternity, ControlUp, Microsoft Endpoint Analytics or similar platform - Awareness of leveraging AI for daytoday engineering tasks, including using AI tools for automation, analysis, and building intelligent agents to improve operational efficiency. **Job Expectations:** - Participate in high level technical concepts spanning technology and business - Define and maintain the enterprise OS roadmap (feature updates, end-of-support planning, version cadence). - Create and maintain hardware driver strategy and compatibility matrices across OEM models - Own OS-level configuration standards (services, startup, performance tuning, reliability settings). - Ensure consistent OS experience across device types - Design, implement, and optimize Windows Autopilot and modern provisioning flows (user-driven, pre-provisioning/white glove). - Manage and version OS build artifacts (language packs, Features on Demand, optional components, OEM customizations). - Integrate provisioning with identity, compliance, and access controls (Entra ID / hybrid) - Improve end-user experience through automation and reduction of provisioning time. - Engineer monthly patching and feature update strategy aligned to business risk and change windows. - Manage update rings, rollout waves, deferrals, validation gates, and rollback plans. - Implement and maintain OS security baselines aligned to security posture (e.g., Microsoft Security Baselines/CIS where applicable). - Build and maintain automation using advanced PowerShell, scripting, and endpoint management APIs (Microsoft Graph preferred). - Engineer and support standard OS builds (base images / reference images / provisioning packages). - Coach and mentor team members, promoting engineering best practices and knowledge sharing. - Contribute to CI/CD workflows, version control practices, and automation pipelines for OS engineering (e.g., Git, Azure DevOps, GitHub Enterprise). - Collaborate closely as a strong team player across engineering, security, and operations teams. - Skilled in Proactive Remediation using Analytics with custom - Strong understanding of XLA (Experience Level Agreements) and improving digital experience through datadriven insights and proactive remediation and selfhealing scripts.